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A multiparty quantum secret report scheme is proposed with quantum encryption. The boss Alice 
and her M agents first share a sequence of (M+l)-particle Greenberger-Horne-Zeilinger (GHZ) 
states that only Alice knows which state each (M+l)-particle quantum system is in. Each agent 
exploits a controlled-not (CNot) gate to encrypt the travelling particle by using the particle in the 
GHZ state as the control qubit. The boss Alice decrypts the travelling particle with a CNot gate 
after performing a o x operation on her particle in the GHZ state or not. After the GHZ states 
(the quantum key) are used up, the parties check whether there is a vicious eavesdropper, say Eve, 
monitoring the quantum line, by picking out some samples from the GHZ states shared and measure 
them with two measuring bases. After confirming the security of the quantum key, they use the 
GHZ states remained repeatedly for next round of quantum communication. This scheme has the 
advantage of high intrinsic efficiency for qubits and the total efficiency. 

PACS numbers: 03.67.Dd, 03.67.Hk, 03.65.Ud 
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The main task of quantum communication is to trans- 
mit message securely between the authorized parties and 
its implement can be completed by the transmission of 
quantum states. EI The features of quantum mechanics 
such as the uncertainty principle, quantum correlations 
and non- locality play an important role for the security of 
message. [l| Any of eavesdropper's action will inevitably 
leave a trace in the result and the parties of communi- 
cation will detect the eavesdropping by comparing the 
results of the samples chosen randomly and then aban- 
don all the results transmitted to avoid leaking the se- 
cret message. |2| The security of transmission for quantum 
communication is embodied to the fact that the sender 
Alice and receiver Bob can find out the malicious or dis- 
honest action of others. Thus quantum communication 
is secure for generatin g key [SI La, m, IM la H and secret 
message splitting H HHS IliKl EM El 111 13 among 
the parties of communication. Experimental implement 
for quantum key distribution has been studied by a lot 
of groups 

Recently, the concept of quantum secure direction 
communication (QSDC), which is used not for distribut- 
ing key but just for transmitting secret message directly, 
was proposed and actively pursued. [Til llil IhI . I20L Ell 
Ellpjl HI IH IHii mm HU Shimizu and Imoto 
|l7l Il8l| and Beige et al. |l9l | proposed some QSDC 
schemes, in which the secret message can be read out 
after at least one bit of additional classical information 
is transmitted for each qubit. In 2002, Bostrom and Fel- 
binger |j2]j introduced an insecure ping-pong scheme for 
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direct communication and key distribution |32(. Subse- 
quently, we mi P u t forward a two-step QSDC protocol 
with Einstein-Podolsky-Rosen (EPR) pairs transmitted 
in quantum data block and another one based on a se- 
quence of polarized single photons. [2l| Wang et 
introduced a QSDC protocol with high-dimension quan- 
tum superdense coding. 

In 2005, Gao et al.^ij^ proposed a scheme for se- 
cure direct communication between the central party and 
the other M parties with Greenberger-Horne-Zeilinger 
(GHZ) states. In their scheme, the M parties can com- 
municate the central party securely with entanglement 
swapping. That is, they can send their secret message 
directly to the central party. We call this model the mul- 
tiparty quantum secret report (MQSR) as it is used to 
complete the task that the agents report their secret mes- 
sage to the Boss in one-way direction. In 2006, Jin et al. 
|34j introduced another MQSR scheme with GHZ states 
following some ideas in quantum dense coding. |S5J 

In this Letter, we present an MQSR scheme with GHZ 
states via quantum encryption. The boss Alice and her 
M agents first share a sequence of (M+l)-particle quan- 
tum systems with a decoy technique. The states of the 
quantum systems are kept by Alice and any other one 
does not know. Each agent exploits a controlled-not 
(CNot) gate to encrypt the travelling particle T by us- 
ing the particle in the GHZ state as the control qubit. 
The boss Alice decrypts the travelling particle T with a 
CNot gate after performing a a x operation on her parti- 
cle in the GHZ state or not, according to the fact that 
her particle is correlated or anti-correlated to that con- 
trolled by the agent. After the GHZ states are used up, 
the parties check whether there is a vicious eavesdropper 
monitoring the quantum line by selecting some samples 
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and measuring them with two measuring bases (MBs), 
X-MB and Y-MB. After confirming the security of the 
quantum key, they use the GHZ states remained repeat- 
edly for next round of quantum communication. With 
quantum storage technique, this scheme has high intrin- 
sic efficiency for qubits and the total efficiency. 

Now, let us describe the principle of our MQSR scheme 
in detail with M agents, say Bob r (r = 1, 2, • • • , M). 

All the (M+l)-particle GHZ states can be described 
by Q 

\ G j..-k+) = ^|(l ;'" fc ) + \ 1 J---k))AB 1 B 2 -B M , 
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(1) 

where j, k G {0, 1}, j and k are the counterparts of the 
binary numbers j and k, respectively; |0) and |1) are the 
two eigenstates of the Z-MB. 

Our MQSR scheme can work with the following steps: 
(SI) The Boss Alice shares a sequence of GHZ-state 
quantum systems, say S qi with all her agents Bob r 
(r = 1,2,- • • , M) privately and securely. That is, Al- 
ice prepares each quantum system randomly in one of 
the GHZ states {\Gj...k+)} and keeps the secret infor- 
mation about the states for any one. She sends the 
particles B r to the agent Bob r and always controls the 
particle A for each quantum system. The parties can 
analyse the security of the GHZ states by the follow- 
ing method, (a) Alice picks out a sufficiently subset 
of the states as the samples, say s e \ for eavesdropping 
check, similar to Ref. [20j . (b) The agents choose X-MB 
= {I + *) - ^(|0> + \-x) = ^(|0) - |1»} or Y- 
MB = {\+y) = ^(|0) + | - y) = ^(|0) - i|l))} 
randomly for their particles in the samples s e i- They tell 
Alice their MBs for their measurements, and then Al- 
ice measures her particles with the correlated MBs. For 
example, if the state of the GHZ-state quantum system 

is |G . . . 0+ > - 7f (|00_-_0> + \ll L ^)AB 1 B a ...BM, A1 " 

M M 

ice chooses X-MB for her particle if the number of the 
agents who choose Y-MB for their measurements on their 
particles is even, otherwise Alice chooses Y-MB for her 
measurement. The other cases is the same as this one 
with or without a little of modification, (c) The agents 
publish their results of their measurements, and Alice 
analyses the error rate of the samples. If the error rate is 
very low, they can conclude that the quantum key, the N 
ordered GHZ states is created securely. Otherwise, they 
will discard the results and repeat the quantum commu- 
nication from the beginning. 

For preventing some dishonest agents from stealing 
the information about the GHZ states with a fake sig- 



nal, Alice adds some decoy photons in the sequence S q . 
That is, Alice prepares some photons randomly in the 
states {| + x), | — x), \ + y), | — y)}, with which she re- 
places some particles B r in S q . In this way, the dis- 
honest agent cannot eavesdrop the information for the 
quantum key S q with intercepting-resending attack and 
cheat. Let us use a simple case as an example to de- 
scribe the principle of this eavesdropping. Assume that 
there are only two agents, say Bobi and Bob2, and the 
three-particle quantum system is in the state \^)o = 
\GHZ} 00+ = ^(lOOO) + \ni)) ABl B 2 . If Bob! is a dis- 
honest man, he can intercept the particle B2 when it runs 
from Alice to Bob2. Instead, Bobi prepares a Bell state 
\if>~) = -^(|01) — |10))b 1 6 2 and sends Bob2 the particle 
62 and keeps the particle b\ . When this quantum system 
is chosen by Alice as a sample for eavesdropping check, 
Bobi performs a Bell-basis measurement on the particles 
B2 and b\. Then the difference of the state and that 
of the particles AB\bi is just a local unitary operation, 
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+ (|OOl) + |llO)X4 Slb2 |0-) B2bl 

-(|ooo)-|ni)X4 Slb2 |^+) B2bl 

-(|000) + |lll)U Slb2 |^-) S2bl ], (3) 



where 



|0 ± ) = i=(|OO)±|ll)), |^) = i=(|01)±|10)). (4) 

Bobx can hide the difference with cheat. Assume that 
the final state of the particles AB\bz is 

|¥)i = \GHZ) m _ = ;^(|000) - |111)) 
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[(\+x)\-x) + \-x)\+x)) Blb2 \+x) J 



+(\+x)\+x) + \-x}\- x)) Blb2 1 - x)) A ] 

- 2 [(I + y)\ + y) + 1 - v)\ - y))^ I + *U 
+(\ + y)\-y) + \-y)\ + v))B lb2 \ - x) A ). (5) 

Bobi can publish a counterpart of the result of his 
measurement for his attack when the quantum system 
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AB\Bi is chosen for eavesdropping check, i.e., if he 
measures his particle B\ and obtains his result | + x), 
he tells Alice that his result is | — x). Bobi's cheat 
cannot be detected. The cases with the final states 
-^j(|001) ± |110) J 4Bif )2 are the same as this one with or 
without a little of modification. Fortunately, this attack 
does not work for the decoy photons as its security is the 
same as the Bennett-Brassard quantum key distribution 
protocol. 0, |3(| Thus the parties can share a sequence 
of GHZ states securely. 

(S2) The agents use the GHZ states as the quantum 
key and send their secret message to the boss Alice with 
a controlled-not (CNot) gate, similar to Ref. j^]} (the 
difference is just that the quantum key is unknown for 
the agents in this scheme). In detail, a agent, say Bob r , 
can report his secret message to the boss Alice by means 
that he prepares a travelling particle T in the state \o)t & 
{|0), |1)}, which represents the classical bit and 1 and 
takes a CNot operation on the particle T by using the 
qubit B r as the control qubit. For instance, we assume 
that the GHZ state in the quantum key is 

\G) = -J=(|0j •••/•••/,• • 1.,...,... k)) ABlB2 -B r -B M m 

After the encryption carried out by Bob r with a CNot 
operation, the state \^) s i of the whole quantum system 
composed of the GHZ-state particles and the travelling 
particle T is 

1 



I*).! = -^(\0j---i---k)\i®a) 

+ \lj ■ ■ ■ i- ■ -k)\i © a)) A B 1 B 2 -B r -B M T- 
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Bob r sends the particle T to Alice who can decrypt the 
qubit T with a CNot operaton on the particles T and A 
by using her qubit A as the control qubit after flipping its 
bit value or not (if the qubits B r and A is anti-correlated, 
Alice should first operates the qubit A with the Pauli 
operation a x ). The agent Bob r continues the quantum 
communication until the quantum key is used up. 

In order to estimate the error rate of the transmission 
for the T sequence which is composed of all the travelling 
particles sent by Bob r , he should insert some sample par- 
ticles s e 3 in the T sequence before it runs in the quantum 
line. The number of the particles in s e 3 is not required to 
be very large, but enough for the statistical analysis. As 
any eavesdropper does not know the information about 
the GHZ states, he cannot decrypt the encryption done 
by Bob r . Thus the security of the quantum communi- 
cation between Alice and Bob r is the same as that in 
quantum one-time pad.0 

(S3) The agents and Alice use repeatedly the quantum 
key conditionally, similar to Ref. That is, they 

first check the security of the quantum key by choosing 
a subset of the GHZ states and measuring them with the 
two MBs, X-MB and Y-MB, same as that in the process 



for creating the quantum key. If Alice confirms that the 
quantum key is secure, the parties use the GHZ states 
remained again. As the amount of the samples chosen 
for checking eavesdropping is negligible comparing with 
all the GHZ states, the quantum key is used repeatedly in 
the next round if there is no one monitoring the quantum 
line. 

For saving the GHZ states in the quantum key in the 
process for eavesdropping check, Alice and Bob r can first 
choose the GHZ states used for encrypting the sample 
particles s e 3 as the samples for checking the security of 
the quantum key. Then they choose some other GHZ 
states in the sequence S q for the eavesdropping check. 

(S4) The agents and Alice repeat the steps (2) and (3) 
until their task is accomplished. 

Different from the classical key in one-time pad crypto- 
system, the quantum key in this MQSR scheme can be 
repeatedly used except for the states chosen for checking 
eavesdropping. For the eavesdropper Eve the quantum 
key is randomly in one of the two eigenstates of her mea- 
suring operation, and then she cannot decrypt the qubits 
in the quantum key. Moreover, her action will destroy the 
correlation of the particles in a GHZ state and will be de- 
tected by the authorized parties. The randomness of the 
quantum key for the eavesdropper ensures the security of 
the secret message transmitted. 

With quantum storage technique. [39| this MQSR 
scheme has the advantage of high intrinsic efficiency for 
qubits rjg = ^ since almost all qubits are useful in prin- 
ciple for transmitting the secret message. Here q u and q t 
are the qubits useful and total qubits for the transmis- 
sion, respectively. The total efficiency rj t in this scheme 
approaches 100% as the classical information exchanged 
is unnecessary except for the eavesdropping check. Here 
r\ is defined as 



(8) 



where bt is the classical bits exchanged between the par- 
ties in the quantum communication. 

In summary, we have presented a scheme for multi- 
party quantum secret report with quantum encryption. 
In this scheme, the Boss Alice first shares a sequence of 
GHZ states as the quantum key, and then the agents use 
a CNot operation to encrypt their message and then send 
it to the Boss. The states of the GHZ quantum systems 
are unknown for any of the agents, and the quantum 
communication is secure same as a quantum one-time 
pad crypto-system. They can use the quantum key re- 
peatedly except for the GHZ states used for check eaves- 
dropping if there is no-one monitoring the quantum line. 
This scheme has advantage of having high intrinsic effi- 
ciency for qubits r\ q and the total efficiency r\ t as almost 
all the qubits are useful for carrying the secret message 
and the classical information exchanged is unnecessary 
for the qubits but those chosen for check eavesdropping. 
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On the other hand, the parties should have the capability 
of storing the GHZ states. 

This work is supported by the National Natural Sci- 
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and Beijing Education Committee under Grant No 
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